Semiclassical Shor's Algorithm 



Paolo Giorda a *, Alfredo Iorio 6 ^, Samik Sen^, Siddhartha Sen c,<i § 
a Institute for Scientific Interchange, Villa Gualino 
Viale Settimio Severn 65, 10133 Turin - Italy 
Center for Theoretical Physics, Massachusetts Institute of Technology 
77, Massachusetts Avenue, Cambridge MA 02139-4307 - U.S.A. 
and I. N.F.N. - Italy 
c School of Mathematics, Trinity College Dublin, Dublin 2 - Ireland 
d I.A.C.S., Jadavpur, Calcutta 100032 , India 
(February 1, 2008) 



Abstract 

We propose a semiclassical version of Shor's quantum algorithm to factorize 
integer numbers, based on spin-1/2 SU(2) generalized coherent states. Sur- 
prisingly, we find evidences that the algorithm's success probability is not too 
severely modified by our semiclassical approximation. This suggests that it 
is worth pursuing practical implementations of the algorithm on semiclassical 
devices. 
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I. INTRODUCTION 



The discovery by P. Shor of an efficient algorithm to factorize integer numbers based on the 
laws of quantum mechanics [1] (see also [2]), was a landmark event in quantum computing 
[3] (see also [4] and [5]). Shor's quantum algorithm determines the prime factors of a 
composite /-bit number N in 1 O [I 2 log I log log I] steps, while the best classical algorithm of 
A.K. Lenstra and H.W. Lenstra [6] requires Ofexpjc/ 1 / 3 log 2 / 3 I}] steps, for some c. This 
shows how powerful a quantum computer could be. 

This discovery fueled the theoretical and experimental search for practical realizations of such 
a "machine of wonders" (see for instance [2], [4], [7], [8], and references therein) . Nonetheless, 
to build a quantum computer with the required power is a very challenging and still not 
accomplished task. This makes Shor's algorithm a theoretically important work which, at 
present, cannot be implemented if not for very small numbers [9], [10]. It is then of strong 
interest to explore semiclassical limits of Shor's algorithm, and to see how much the related 
approximations affect the algorithm. Some ideas along these lines are already present in 
the literature [11]. There it is shown that the Quantum Fourier Transform (the core of 
the algorithm), could be simplified if one uses a macroscopic signal to control the quantum 
gates. 

We assume here that semiclassical devices should be easier to handle than quantum devices, 
a semiclassical device being (in this context) a physical system performing the computation, 
whose dynamics is partially governed by the laws of classical physics and partially by those of 
quantum mechanics. A cogent example is the system imagined in [11], where the macroscopic 
signal controlling the quantum gates is a pulse of several volts in a coaxial cable. It is easy 
to convince oneself that, on general grounds, it is a lot handier to deal with such a classical 
pulse than to deal with more "fragile" (decohering) quantum signals. 

The approach we take in this paper is fundamental and general, as we would like to give 
the mathematical prescriptions for implementing Shor's algorithm on generic semiclassical 
devices. We shall make use of generalized coherent states, and tackle the difficult problem 
to find out what a semiclassical approximation is in this framework. Our primary goal is 
to see if the semiclassical limit of Shor's algorithm is still more powerful than the classical 
factoring algorithm. If it is, the task of constructing a semiclassical computer would be 
worth pursuing. 

The method we present here (based on generalized coherent states |A) of SU(2) for spin 
j = 1/2) is made of two parts: 

First, we show that in the |A) basis a symplectic structure arises. Hence the physical system 
making the computation could, in principle, be described by a classical phase-space, and 
the computation itself as an evolution in this phase-space. In this setting, the quantum 
fluctuations are naturally dropped by mapping j(j '• + 1) — > j 2 . A fully classical version of 
Shor's algorithm would then be the one where all the quantum operators (gates) O are 
replaced by their classical counterparts {\\0\\), and the quantum evolution replaced by a 
classical path over the phase-space. 



Here, and in what follows log = log 2 and In = log e , unless otherwise stated. 
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In particular this philosophy applies to the Quantum Fourier Transform $. A classical ver- 
sion of $ would be the one with the string of operators i?jS, and Sijs, entering the expression 
of $, replaced by (A|i?j|A)s, and (A|S'j J |A)s, respectively. We define to be semiclassical the 
approximation that replaces $ with (A|$|A). This is the second part of our recipe for semi- 
classicality in this framework. 

In the next Section, we shall introduce the notation and review the key ideas of Shor's 
algorithm. In Section III, we shall explain the two parts of our coherent state semiclassical 
approximation: the classical time-evolution for the spin 1/2 system making the computation 
(Subsection III. A); and the coherent state approximation of the Quantum Fourier Transform 
(Subsection III.B). Eventually, in Section IV we shall evaluate the effects of the semiclassical 
approximations on the success probability of Shor's algorithm, and we shall perform some 
numerical tests and comment on them. The last Section is devoted to the conclusions. 

II. INTEGER FACTORING AND QUANTUM MECHANICS 

Given an /-bit integer number JV, the fastest way to factor it into relative co-primes JV = 
rii • n 2 ■ ... is to find t\ and t 2 such that t\ = ^(modJV), and ti ^ ±t 2 (modJV), thus one can 
write 

(ti + t 2 )(*i-*2) = 0(modiV), (II.l) 

where neither (t\ + t 2 ) nor (ti — i 2 ) is zero (modJV). It is then matter of finding the greatest 
common divisors: gcd(t x + t 2 , JV), and gcd(£i — t 2 , JV) to have two of the factors, and so on. 
This approach is used by both the best known classical and best known quantum algorithms 
for factoring. 

The quantum algorithm uses a further result of number theory: if one randomly picks an 
integer 1 < x < JV, and gcd(:r, JV) = 1 (otherwise we would have been so lucky to have 
already found a factor of JV), then the period L of the function 

f(a) = :r a (modJV) , with f(a + L) = f(a)(modN) , (II.2) 

determines the factors of JV, provided L is even and x L l 2 7^ — l(modJV). This can be easily 
seen from the fact that x a = x a+L (modJV) implies 

x L = l(modJV) , (II.3) 

and, for L even, both sides are squares. Thus, since x L ^ 2 7^ ±l(modJV), one can proceed as 
in Eq. (II.l), and compute gcd(x L ^ 2 ± 1, JV). This procedure, on which the Shor's method 
to determine L "quickly" is based, would take a polynomial time on a computer that makes 
use of the laws of quantum mechanics. 

Let us now introduce a mathematical and physical framework to describe a quantum com- 
puter, give some of the details of Shor's algorithm, and introduce our notation. 
As any quantum system, a quantum computer is described by a Hilbert space [12], and 
its logic is implemented by operators (quantum gates) acting on this Hilbert space. In the 
usual model one considers the Hilbert spaces that are tensor products of two-state systems or 
quantum bits. In the spin-1/2 representation of a quantum bit, a spin state with j = —h/2 



3 



(spin down) represents the binary digit zero, and a spin state with j = +H/2 (spin up) 
represents the binary digit one. These states form a basis of the two-level Hilbert space H2, 
and are usually represented as 



for spin down, and 



®\\~\) OT ^1°) or Ci") ( 1) , (n.4) 



or (ii)|l) or (iii) (°V (II.5) 



for spin up, depending on the notation. The notation (i) will be used only in Section III. A 
to make the role of the spin j = 1/2 explicit. The full Hilbert space used to represent a /-bit 
number is then 



1-1 



H = (g)Hi. (II.6) 

Clearly such two-level systems can be physically realized in many other ways, see for instance 
[13]. However, in all cases, the algebraic structure of importance can be represented by such 
a tensor product space. 

The spin states above form a representation of the Lie algebra SU(2) of angular momentum. 
As is well known, this Lie algebra has three generators J , Ji, and J 2 , and one can introduce 
the step-up, J + = J\ + i J 2 , and step-down, J_ = J x — i J 2 , generators to write the defining 
commutation relations of SU(2) as 

[J+, J_] = 2hJ , [Jo, J±\ = ±hJ ± , (II.7) 

also known as the Cartan-Weyl form of the Lie algebra. In the next Section we shall present 
a semiclassical version of this quantum system. 

We now want to briefly summarize Shor's quantum factoring algorithm. We start with the 
definition of the Quantum Fourier Transform (QFT) acting on a state 

\a) = |aj_i, ...,a ) , (II.8) 

where = 0, 1, Mi — 0, I — 1. This is the quantum representative of the /-bit number 
a = X^=o a »2*, a max = 2 l — 1 = q — 1, hence q = 2 l . Note the order of the entries in Eq. 
(II.8). 

The QFT acts by replacing \a) by 

I a) -> — 2 |c> exp{27ri^} , (II.9) 



c=0 



where, as for \a), \c) is the quantum representative of the /-bit number c = X^-=o c^- 7 ; 
q = 0, 1 Mi — 0, ...,/ — 1. This is achieved by acting on \a) with the string of /(/ — l)/2 
operators in the given order 
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$ — RoSo ! iSo ; 2---Soj-2So ; l-iRiSi ! 2Si ! 3...Sij-2Sij-iR2---Rl-2Sl-2,l-lRl-l , (11.10) 

where the operators Ri act on the i th two-states Hilbert space W 2 , and the operators Sij, 
j > i, act on tensor products of two-states Hilbert spaces H 2 ® H J 2 - While the expression 
for $ in Eq. (11.10) is independent on the notation, the operators Ri can be expressed as 



Ri 



V2 



in notation (i), or 



100(0*1 + 10^1 + |l l >(0 l | + e" r |l i )(l J |] , 



7? - — ( 1 1 

1 V2 { 1 "I 



(11.11) 



in notation (ii), and the operators S it j are given by 

% = [\0j,0i)(0j,0i\ + |0j, li><0j, 1*1 + I lj, 0i> <lj, 0<j + e w « | lj, li> <lj, 1<|] 



(11.12) 



(11.13) 



in notation (i), or 



'h3 



( 1 \ 

10 

1 

V e*« J 



(11.14) 



in notation (ii), where % = Tr/2 J ~ t . It can be shown [1] that the string of operators in 
$ generates the required state (II. 9) only after the bits representing the output have been 
reversed. Since this can be done in polynomial time, we omit this step except where the 
analysis requires more care. 

The state one starts from for the implementation of Shor's procedure is simply |0)|0). Thus 
one first obtains ^=2=0 l a )|0) by acting with $ on the first register. Then the modular 
exponentiation on the second register gives the state 

\s) = ^-J2\a)\x a (modN)) , 

a=0 



(11.15) 



where N is the number to be factored. It is now matter of applying again the QFT <3> to 
the first register in \s) to obtain 



| s ') = - ]T exp{2ni — }\c)\x a (modN)) . 

1 a,c=0 1 

The probability of observing c, and x k (modN) is easily computed as 



P{c,x k {modN)) = \(c,x k {modN)\s') 



(11.16) 



- exp{27ri } 



(11.17) 



a=fc(modL) 
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The probability (11.17) is thus a function of the period L of x a (modN) which we want to 
determine. Hence measuring c, and x k (modN) turns into a way of determining L. This is 
seen by noticing that a = /c(modL) means a = k + f'L for some integer /, hence 

2 

(11.18) 

where [A] is the integer part of A, and {Lc} q = Lc — dq for some integer d. One also would 
like to maximize this probability by choosing the phases in the sum (11.18) to point as close 
as possible to the same direction in the complex plane. This is achieved in [1] by requiring 

-\ < {Lc} q < \ , (H.19) 
or, equivalently, (using the definition of {Lc} q ) 

c d 
q~L 

When this condition is satisfied, for large gs the sum in (11.18) can be approximated to order 
0(l/q) by the integral 




(11.21) 



where u = Lf jq. This integral is minimized when {Lc} q /L = ±1/2, giving the lower bound 
4/(ttL) 2 ~ 1/3L 2 for the probability (11.18): 

P(c,x fc (modiV))>^. (11.22) 

In Fig. 1 we plot P against c for q = 256, L = 10. By inspection of (11.20) one imme- 
diately sees that L was found: c was measured, q is known, and d/L is the best rational 
representation of the real number c/q, and can be determined by using a continuous fraction 
expansion. 

There are two leading contributions to the complexity of this algorithm: 

i) The modular exponentiation. This part of the algorithm could be implemented classically 
(it is not known a quantum way to speed it up), and the complexity of this procedure is 
known to be 0(l 2 log /log log/). 

ii) The QFT $. By counting how many operators enter the expression (11.10) of $, we notice 
that this part of the algorithm involves 0(l 2 ) steps. 

One thus conclude that the overall complexity is 0{l 2 log /log log/). 

III. THE SEMICLASSICAL APPROXIMATIONS 

To present our semiclassical approximation, we want now to exploit the semiclassical na- 
ture of the coherent states associated with the Lie algebra SU(2). First we shall construct 
the classical phase-space associated with the Lie algebra of the angular momentum (II. 7). 
Then we shall introduce our coherent states approximation of Shor's algorithm, with special 
emphasis on the QFT $. 



P(c, x fc (modiV)) 



1 {(q-k-l)/L] 

2 exp{27ri/ 
q f=o 



1 



(11.20) 
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A. Symplectic Structure and Classical "Time-Evolution" 



Mathematically a classical representation of the Lie algebra SU(2) corresponds to determine 
the associated phase-space, with its symplectic structure, such that commutators of the Lie 
algebra are realized as Poisson brackets of appropriate functions derived in this phase-space. 
The procedure for doing so is well known, and is based on generalized coherent states [14]. 
Let us briefly summarize it. 

We start by defining an unnormalized coherent state 

|A>=exp{A^}|i ~>, (III.l) 

where A is a complex number, we use the basis (i) in (II. 5), ||, — |), ||, +|), and the angular 
momentum operators Jo = Jo/h, J + = J+/H, and J_ = J-/fi are dimensionless. This last 
point is of some importance since we are going to introduce dimensionless Poisson brackets, 
whereas the standard Poisson brackets have dimension [action] -1 . Thus we shall eventually 
end up with a symplectic structure for the dimensionless operators J , J+, and J_. In the 
coherent state representation these operators, suitably normalized, are the complex functions 

_ (A|J |A> _ 11-|A| 2 
Jo = 



(A|A) 21 + |A| 2 ' 

J+ s mm = i , (III . 2) 



J- 



(A|A) 1 + |A| 2 
(A|J_|A> _ A 



(A|A) 1 + |A| 2 
They have the general property that 

J+J- + Jl = j 2 • (III.3) 

In our case, j = 1/2. Hence the vector (Jo, J\, J2) has length j = 1/2, and represents a 
point on the surface of the sphere S 2 ~ SU(2)/U(1) of radius 1/2. On this see also [14]. 
The first part of our semiclassical description is to represent the SU(2) algebra of quantum 
angular momentum in the coherent state functional form (III. 2). This causes: i) the quantum 
fluctuations in the angular momentum to be automatically dropped via j(j + 1) — > j 2 , as 
can be seen from Eq. (III. 3) above; and ii) a symplectic structure over the space of the 
stereographic coordinates on the sphere naturally to arise. To see how point ii) is achieved 
we introduce the Kahler potential [15], V(A, A) = ln(A|A) = ln(l + |A| 2 ), to construct the 
associated symplectic form ui on the phase-space defined by the complex variables A, and A 

u = uj x - x d\ A d\ (III.4) 

where 

^,a = -^,a = |^ = (1 + |A|T 2 , (IIL5) 
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and of course (cj _1 ) a ^ = (1 + |A| 2 ) 2 . 

The Poisson brackets of any two functions on the A, A phase-space 2 , /(A, A), <?(A, A) can 
then be defined as 

{/, g} = (cu- 1 ) xrx d x fd- x g + (u;-% x d x fd x g , (III.6) 

leading to the following Poisson brackets of Jo, J+, Jl 

{ J+, J_} = 2 Jo , {Jo, J±} = ±J± . (III.7) 

This is the Lie algebra SU(2) we started from, but in a dimensionless semiclassical form. 
This establishes the fact that the phase-space corresponding to SU(2) is S* 2 ~ SU(2)/U(1) 
with stereographic coordinates J~ + ,JL, and Jo. 

We can move further to define the Hamiltonian H associated with the symplectic form u. 
To this end, we introduce a vector field v = v x d x + v x d x that keeps ui invariant 

L v u = (v x d x uj xx + v x d x u xx + u xx d x v x + u xx d- x v x ) dX A dX = , (III.8) 

where L„ is the Lie derivative associated with the vector field v [15]. By computing the Lie 
derivative one obtains the following conditions for the vector field v x = CX, and v x = CX, 
with C a complex constant. 

One can also write the Lie derivative as = d ■ i v + i v ■ d, where the exterior derivative d 
and the internal product (or contraction) % v act on p- forms oo G Vt p as d : fP — ■> Q p+1 , and 
% v : Q p — > fi p_1 , respectively. To be more explicit let us write a p-form in local coordinates 
on a symplectic manifold M of even dimension 2n 

lu = ^uj il ... ip (x 1 , x 2n )dx il A ... A dx ip , (III.9) 

where 0Ji x ...i v is a totally antisymmetric tensor field, and x±, ...,x 2n are the local coordinates 
on the 2n dimensional symplectic manifold M. Thus 

duj = - — ^—r-.d k uj il ;dx k A dx h A ... A dxi , (III. 10) 

(p + iy. 

while 

i v u = ^ \ l y {- l ) 3v3 t- jJ i 1 ...j...i v dx il A ... A dxj A ... A dx ip , (III. 11) 

where v = v^dj, and dxj means that dxj is missing. 



2 Although, for the sake of simplicity, we shall denote the phase-space variables as A and A, from 
the definition (III. 6) it is clear that, if, for instance, we choose A as the generalized coordinate, 
its conjugate momentum is p x = A/(l + AA), so that {X,p x } = 1. For the other choice, A is the 
generalized coordinate, and its conjugate momentum is p x = — A/(l + AA). 
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In our case 00 is a symplectic two-form, hence it is closed, du — 0. Then, ~L v uj = implies 
that d(i v u) = 0. According to the lemma of Poincare it follows that locally the one-form 
i v uj is equal to d acting on a function (a zero-form) which we call — H 

i v uj = -dH . (111.12) 

If H can also be globally defined, then it can be taken as the Hamiltonian corresponding to 
the vector field v. 

By using the definition (III. 11), and the above given conditions for the vector field to leave 
uj invariant (with C = 1/2) we obtain 

A rY a t a l\d\ + \d\ 
i v u = -v u x - x dX + v u- xx dX = -- ( 1 + A ^ 2 > (111.13) 



which gives 



as a possible classical Hamiltonian. Once H is chosen it determines the dynamics in the 
phase-space, generating the "time-evolution" of any function /(A, A) as 

f = {H,f}. (111.15) 

It is straightforward to check that / = idf/d(f), where A = re %< ^. Hence the dimensionless 
time parameter of the semiclassical evolution is t — —i(f>. 
By noticing that Jq = H, and using (III. 7) one has 

j± = ±J±, j = . (III. 16) 

Thus, in the semiclassical limit, the quantum spin system we started out with has been re- 
placed by coordinates on S 2 , with the associated symplectic form. A Hamiltonian consistent 
with this symplectic form can be introduced. That leads to uniformly precessing coordinates 
J + , and always preserving the length of the vector. This is a classical spinning vector. 
Note also that 

{J+,J-} = 2H. (III. 17) 

The first step towards our attempt to construct a semiclassical version of Shor's algorithm is 
now complete. The key observation is that A can be interpreted as a variable that describes 
a classical spinning particle. 



B. Coherent State Approximation of Shor's Algorithm 

We now move to the second stage of the semiclassical approximation. The steps of the 
quantum procedure we propose to modify are the ones involving the QFT which consists in 
the following replacement 
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<?-l 

5»<c|*|a), (IH.18) 



c=0 



with (c|$|a) = q 1 / 2 exp{27ria • c/q}. We want to write (III. 18) in the basis of normalized 
coherent states |A) = |Aj_i, A ) 

|AA = (1 + \i\)~ 1/2 (\0i) + Xilh)) \/t = 0, I -1. (111.19) 

This can be done as follows 

(c\$\a) = J dn(X)dn{X')(c\X)(X\<S>\X')(X'\a) , (111.20) 

where the measure is defined by requiring / d/i(X)\X)(X\ = 1, and is given by 

/«a) = n / = n I f /; ^ , ( ni,D 



i=0 v- 1 - 1 j=o 

with Aj = r^e 1 ^, and 

z-i 



( C |A) = + A,A,)- 1/2 A? = n(l + r^rfe^ , (111.22) 

i=0 i=0 

(X'\a) = [](1 + A' t A' t )- 1/2 A; a < = n(l + r'l)- 1 ' 2 ^ e~ ia ^ . (111.23) 



j=0 



Here no approximation has been made yet. This is a simple change of basis that, of course, 
preserves all the information content of (c|$|a). 

The approximation we now make in Eq. (III. 20) consists in keeping only the diagonal entries 
in the coherent state basis, namely 

(A|ct>|A'> ~ <W(A|<t>|A) , (IH.24) 

and then perform the A integrals. In what follows we shall introduce the short-hand notation 
(A|.M|A) = M x , for any matrix M. 

In Appendix A it is proved that, for any matrix Ai, M. x preserves all the information. 
It is important to stress that, although no quantum information is lost by considering the 
A4 x s, these functions are now described in terms of a set of variables that have a classical 
interpretation. Using the technique described in detail in Appendix A, we can write R x , S X j 

R- =^[l + X t + Xi- XiX t ] , (111.25) 
= A id [l + A, A, + XjXj + '''' A;A,A,A,; , ( IIL2 6) 

and $ A 



$ A = -^Ao,...,*-i £ e 2 - b -f n Af'A?- 1 -* , (IH-27) 

V 1 b,d=0 i=0 
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where 



V...I-1 = nV + w 2 ) -1 > 

i=0 

and as in the case of the QFT of the standard Shor's algorithm (see Eq. (II. 9)) the integer 
numbers b and d in exp{27ri6 • d/q] are given as b = X)'=jjj&j2 l , &i = 0, 1, Vi = 0, ...,/ — 1, 
and similarly for d, and we explicitly wrote the "label reversed" version of d only in the 
exponents of A. 

One could go further and approximate <3> A with the appropriate product of R x s and S x s as 

$ A ~ RoSo j1 ...Sq i1 _ 2 Sq 1 _ 1 R x ...R x _ 2 S x _ 21 _ 1 Ri_ 1 . (III. 28) 

If one does so, powers of A, and A, higher than and 1 would be obtained. Thus one loses 
the matching between the dimension of the original Hilbert space and the dimension of the 
space of parameters. This last step could be seen as a high spin approximation of the QFT: 
the truly "classical" setting. We call "semiclassical" the approximation that stops at $ A as 
given in Eq. (111.27) (see also Eq. (111.24)). 

In this semiclassical setting, it is only when we perform the integration over the Xs in Eq. 
(III. 20), using (III. 24), that some information is lost. To show this, let us first write $ A in 
Eq. (III. 27) in polar coordinates 

$ A = — + r*)}- 1 ) £ e 2mi T JJ r (fc+*) e i[(fc-*)]* , (HI.29) 

V$ \i=0 J b,d=0 i=0 

where, to simplify the following computations, we substituted — > di as we shall con- 
sider (c|<E»|a) rather than (c rcv |$|a), and read the entries of (c| in reverse order only at the 
very end. 

Using (III. 29), the definition of the measure (III. 21), and the expressions (III. 22) and (III. 23) 
for (c|A) and (\\a), respectively, we obtain 

(c|$|o> ~ / ^(A)(c|A)$ A (A|a) = ^ E e 2 ^l acbd , (111.30) 

J n b,d=0 

where 

lacM = if f _!^_ r ^+^)+(^*) d^Kc^H^m . (HI.31) 

The final effect of the integration is to modify the state of Shor's algorithm \s') (see Eq. 
(11.16)), on which one has to perform the measurement, to the state given by 

= ~ t E f E e 2mb -fl acbd ) \c)\x a (modN)) . (111.32) 

71 a,c=0 \b,d=0 J 

By inspection 
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lacbd — A acbd 5d,b+c-a , (III. 33) 

and the nonzero coefficients are 3 

A acM = qn l H ^(1 + S biCi ) = ^ n(l + h iCi ) = ^h(b, c) , (IH-34) 

where 

h(b, c) = n(l + 5 biCi ) e {1,2,..., 2'-\ 2'} , (IH-35) 

i=0 

depending on how many bits of the numbers c and b are equal 4 . 
Thus some of the original information is now clearly lost: 

IS') = 11 y h(b,c)exp{i—b(b + c-a)}\c)\x a (modN)), (111.36) 

3 <?M,c=0 ? 



as compared to (11.16) 



and 



I q— 1 <-) 

|s') = - X! exp{i— ac}|c)|:r a (modiV)> , 

5 a,c=0 9 



1 1 ^ 



Q b,b' ,a,a' ,c,c'=0 

= g M^)M^c)e^^^^)^^] 

^ 1 , (IH-37) 



3 The ^-integrations give qir 1 , while each of the r-integrals is of the form 



r°° ndn 2( bi+Ci ) 
Jo 



k (l+rf) 4 '* 
which is equal to 1/6 for &j = q, or to 1/12 for &j / Cj. 

4 The value 1 is obtained when none of the bits of b is equal to the corresponding bit of c, the 
value 2 is obtained when only one of the bits of b is equal to the corresponding bit of c, and so 
forth, up to the value 2 l which is obtained only when all the bits are equal, i.e. when b = c. 
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while (s'\s') = 1. To evaluate an upper bound B for («S'|«S') we set all the phases to zero, 
and notice that h(x, y) can also be written as 5 

h(x,y)e{2 l - n :ne{0,l,...,l}}, (111.39) 

where n is the number of bits of x that differ from the corresponding bits of y 

i l?; ?! ,„ u ,„ , q (' ( r 



, n=0 



A((i + 2 -7) 2 = i. (HI.40) 



IV. SUCCESS PROBABILITY OF THE SEMICLASSICAL ALGORITHM 

To test the efficiency of our approximation we compute the probability V(c, x k (modN)) 
\(c, x k (modN)\S')\ 2 . From the expression (III. 32) for |«S') we have 



V(c,x k (modN)) 



q-l / q-l 



acbd 



a=0 \b,d=0 



(IV.l) 



a=k(modL) 



where, as in Eq. (11.18), a = k(modL) can be written as a = k + fL, with integer /. From 
the results of the previous Section this probability is nonzero if and only if di = Cj + h — a iy 
Vi = 0, I - 1. Hence, using Eq. (111.36) 



V(c, x k (modN)) 



1 



q 2 3 2l 
1 



- L 1 9-1 



X X] h(b,c)e l " 5 d ,c+b-k-fL 

f=0 6,d=0 



9-1 
6=0 



_j22L 6(c+6-fe) 



/=o 



i^LfbL 



Comparing it with Shor's expression (11.18) 



(IV.2) 



(IV.3) 



P(c, a; fc (modiV)) 



■ q — k — 1 j 



2 r 



5 To rewrite the sums over b, b' in (III. 37) as sums over n, m notice that the number of terms is 
the same: b takes 2 l values (0, 1, 2, 2 l - 1), and 




(111.38) 



where the combinatorial factor tells us how many terms in the sum over b differ by I bits from c. 
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we see the supplementary overall factor 1 /3 2Z and sum over b. Each term in the sum over / 
is now modulated by Y^b h(b, c) exp{27ii6(c + b — k)/q}. 

We could expect that the peaks would now be spread over such a wider range of values of 
c that the period-finding power of the algorithm would be badly spoiled. But two features 
come in hand: i) the coefficients h 2 (b, c) tend to zero for large n, i.e. for b very different from 
c; ii) by construction (see Section II, and [1], [2]) the J2f m (IV. 3) works like a "filter" of the 
values of b, being a maximum at b = c and falling down to zero otherwise. The combination 
of these two phenomena has the pleasant effect of maximizing V around the same values of 
c where P is maximum, i.e. the values that solve the factorization problem in the first place. 
The leading contribution to V is then 6 



V 



q-k-l j 



1 

327 



■ 3= k F i ] 

E 

f=o 



e iff{LZh 



(IV.5) 



Thus the semiclassical approximation leaves the algorithm very efficient at spotting the 
required periodicity L (which is the main task of the algorithm): L is determined as before 
from the maximizing condition in (11.20) 



< 



2q ' 



for some integer d. 

Our plots of the semiclassical probability in (IV. 3), obtained for (S'lS')^ 1 !^ and 10 _1 P, 
confirm this result. For instance, the plots for q = 256 could be regarded as the actual 
spotting of the periods L = 10, and L = 16 for the factorization of iV = 33 (taking x — 5), 
and N = 51 (taking x = 2), respectively. To appreciate the k dependence see Figs. 3, 4, 
and 5. 

From our plots, see for instance Figs. 3, 6, and 7, we also see, for k — 1, 



(S'lS'^V ~5x 10" 2 P 



(IV.6) 



This confirms, from yet another perspective, that the values where V has a maximum are 
not too widely spread around the corresponding Shor's values. 

The last question left to answer concerns the behaviour of the success probability V for large 
/. Two things are important: i) the ratio R\{1) = V/P; ii) the ratio R2 = V max /V m i n . 



6 One might also move away from the leading term, and consider more contributions from the sum 
over b, "coarse graining" the c-axis by summing up all the contributions to V from the interval 
c ± Ac. For instance, choosing Ac = 1 amounts to consider also the 6s differing by 1 bit (n = 1). 
In this case 

2 

(IV.4) 



(l + J/4 + Z/2)__ 



I 2 ^] 2 
f=o 
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The first tells us how smaller than Shor's the semiclassical probabilities get, and it is easy 
to compute 

Ri(l) = £ ~ (i)* ~ 1(r(2/5) ' • ( IV - 7 ) 

For large / the magnitude of the semiclassical probabilities exponentially falls off. The second 
ratio is independent from / and, as proved in the earlier discussion, nearly as big as Shor's 

V P 

' max A max / T -v T Q \ 

R 2 = — — ~ — — . (IV. 8) 

' min -"^min 

This seems to us quite encouraging, as we might conclude that, despite the fact that the 
actual value of the semiclassical probability V scales exponentially with /, the semiclassical 
"signal-to-noise" ratio R 2 is nearly as good as the quantum one. 

In Appendix B we present an alternative method to study the scaling properties of V . 

V. CONCLUSIONS 

We have invented a semiclassical version of Shor's quantum factoring algorithm based on 
SU(2) generalized coherent states, and we have investigated its impact on the algorithm's 
efficiency 

The coherent states |A) for the spin- 1/2 systems are the superpositions | — l/2) + A| + l/2), 
where the complex variables A have a classical interpretation. Under this interpretation, 
a classical phase-space for A can be constructed by a well known procedure. This clarifies 
in which sense the quantum evolution, necessary for the implementation of the algorithm, 
could be, in principle, mimicked in a classical fashion. 

We expressed the Quantum Fourier Transform (the essential part of Shor's algorithm) by a 
coherent state diagonal representation, where the variables introduced have the aforemen- 
tioned classical interpretation, although the operation itself is still quantum. 
This representation does not lead to a loss of information. It is only after integration over 
the classical variables that some information is lost, and an approximation is made. Our 
analytic and numerical results show that this semiclassical step is very effective at spotting 
the required periodicity: despite the fact that the actual value of the semiclassical success 
probability decreases exponentially with /, the semiclassical "signal-to-noise" ratio is nearly 
as good as Shor's. In other words, our semiclassical procedure preserves most of the power 
of the quantum algorithm. 

Finally, with the above results in hand, we are confident that future searches along this line, 
for the implementation of Shor's factoring algorithm on semiclassical devices, could lead to 
important new discoveries. 
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APPENDIX A 
INFORMATION PRESERVATION 

We show here, in full generality, that Ai x has the same information as M.. This is seen from 
the fact that one can reconstruct the original information contained in any q x q matrix M. 
acting on the Hilbert space H = ® W 2 in the following way. In notation (ii) 

q-1 

M= J2 M nm \n)(m\, (A.l) 

n,m=0 

where \n) = n ), (m\ = (m^_i, m |, n labels the rows, m the columns, and 

n i: rrij G {0, 1}. Thus 

9-1 

M x = ]T M nm (\\n)(m\X) 

n,m=0 

= £ M nm W-i ■ • • WWr 1 ■ ■ , (A.2) 

n,m=0 

where A 0; . = n'=o(l + l^«| 2 ) an( i our statement is proved. 

All one has to do is to keep track of the powers of the As and As, in the given order, and 
no information is lost. This feature is due to the fact that A is a complex number, hence 
the dimension of the space of parameters is equal to the dimension of the original Hilbert 
space TL. Furthermore, there is a one-to-one correspondence with the binary numbers and 
the powers of (A™^ 1 • • • A^XA™^ 1 • • • A^°), with n i: rrij G {0, 1}. Let us stress again that no 
quantum information is lost, but the A4 x s are functions of classical variables. As a simple 
example let us consider $ A for the case / = 2 

^ A = + |A a | 2 )(l H- |A | 2 )] 1 

(1 + Ao + Ai + AiAo 

+Ao — AoAo + AiAo — AiAoAo 

+Ai + /3A Ai - AiAi - /9AiAiA 

+AiA - p\ \i\ - A1A1A0 + /^AiAiAoAo) , (A.3) 
where (5 = exp{i7r/2}, and the original matrix $ = RqSq^Ri is easily reconstructed as 
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.[(l + IA^Xl + IAol 2 )]- 1 



(I 1 1 1 \ 
1-1 1 -1 

1/3-1-/5 
V 1 -P -1 /3 / 



(A.4) 



where, as explained in detail in the general case, the powers of A label the rows, the powers 
of A label the columns, and we used notation (iii) for the 4x4 matrix 7 . This matrix differs 
from $ only in the overall factor [(1 + |Ai| 2 )(l + |Ao| 2 )]~\ but the trace is left invariant 



Tr$ 



(0-1) 



(A.5) 



Trace-preservation, Tr$ = / <i/z(A)$ A , is a general property of some importance as a check on 
the correctness of our normalizations, which are used in the computation of the semiclassical 
efficiency. 



APPENDIX B 



MORE ON THE SCALING OF THE SUCCESS PROBABILITY 



We want to give here an alternative approach to study the scaling behaviour of the semi- 
classical success probability in Eq. (IV. 3). Write 



b = d +(b-c) = c + ^(6 p -c p )2 p , 

p=0 



(B.l) 



where (b p — c p ) = 0,±1. Thus, using the rewriting explained earlier in the footnote with 
Eq.(III.38), the structure of the sum over b becomes 



2'-l 



£ e lbA = e i£A ]T 



b=0 



i_ 

n=0 



1 + ( e ± ^ A + e ± ^ A + --- + e ±l2l - lA \ terms + 

1= I I terms 



(B.2) 



for the given A. We can approximate this expression by taking only one "effective" phase 
term for each n, say 7(71) (for instance 7(71 = 0) = is exact). Eventually, the sum over b 
can be approximated as 



7 The 1 x q or q x 1 vectors in notation (iii) are, of course, obtained from the tensor product of 
the basis vectors of the two-state Hilbert spaces H\, and follow the convention: (1,0,0, ...,0) = 0, 
(0, 1, 0, 0) = 1, (0, 0, 1, 0) = 2, (0, 0, 0, 1) = q— 1, for the 1 X q row-vectors, and similarly 
for the gxl column-vectors. 
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2'-l 



E e M ~ ^ E 



3 7(n)A 



f>=0 



n=0 



n 



(B.3) 



The probability (IV. 3) then reads 



V(c, x k (modN)) 



where 



1 



9-1 



1 

~q3 l 



c e 



6-(c-fc+h) 



E e 



-2-Kif'- 



e i 



) E e 9 



E 

n=0 



-d—njlixi 



7(u).( 7 (u) + c-fc-/L) 



n 



r g — fc — 1 1 
1 L £ J . . 

— V e~ 27ri/ ^ 



E 



n 



2 l ~ n e iz ( n <f) 



(B.4) 



2tt 



7W(7W + c-k- fL). 



(B.5) 



The actual behaviour of /) is quite complicated, and it deserves farther study. What we 
intend to do here, instead, is to show that a rough approximation already gives indications 
on the scaling behaviour of V. To this end we take z(n, f) ~ nz, with z constant 



V 



(2 + e 



rg-fc-li 
IZ\1 I L ' 



q3 l 



E e 

f=o 



h(z,l) 



r g — fc — 1 t 
~\ L 

- y e 2mf , 

9 /=o 



(B.6) 



which is Shor's probability with a different oscillating overall factor 

h(z,l) = 9-'(|2 + e^| 2 )' = 9-'(5 + 4cosz)' . 



(B.7) 



The difficult problem is to find the right constant z to suitably approximate z(n,f). Let 
us study the behaviour of the function h(z, I). This symmetric (h(—z, I) = h(z, I)), periodic 
(h(z + 2mn,l) = h(z,l)), bounded (h(z,l) G [9~', 1]) function, in the range z, G [— 7r, 7r], 
reaches its maximum at z — 0, and its minima at z — ±ir. If ( is such that h((, I) = 
\ Vax = \ , we find that ((I) = arccos[|(^7 — 5)] — > very rapidly as / increases. Thus, 
for big I, h(z,l) is zero everywhere, except at z — 0, where it is 1. 
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Figure 1: Shor Probability for q = 256, L = 10. 
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Figure 2: Semiclassical Probability for q = 256, L = 10, k = 1. 
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Figure 3: Shor (dashed lines) and Semiclassical (full lines) Probabilities for 
q = 256, L = 10, and q = 256, L = 10, k = 1, respectively. For the Shor 
Probability the plotted values are a factor of 10 smaller than the actual 
values. 
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Figure 4: Shor (dashed lines) and Semiclassical (full lines) Probabilities for 
q = 256, L = 10, and q = 256, L = 10, k = 5, respectively. For the Shor 
Probability the plotted values are a factor of 10 smaller than the actual 
values. 
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Figure 5: Shor (dashed lines) and Semiclassical (full lines) Probabilities for 
q = 256, L = 10, and q = 256, L = 10, k = 9, respectively. For the Shor 
Probability the plotted values are a factor of 10 smaller than the actual 
values. 
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Figure 6: Shor (dashed lines) and Semiclassical (full lines) Probabilities for 
q = 512, L = 10, and q = 512, L = 10, k = 1, respectively. For the Shor 
Probability the plotted values are a factor of 10 smaller than the actual 
values. 
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Figure 7: Shor (dashed lines) and Semiclassical (full lines) Probabilities for 
q = 1024, L = 10, and q = 1024, L = 10, k = 1, respectively. For the Shor 
Probability the plotted values are a factor of 10 smaller than the actual 
values. 
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Figure 8: Shor (dashed lines) and Semiclassical (full lines) Probabilities for 
q = 256, L = 16, and q = 256, L = 16, k = 1, respectively. For the Shor 
Probability the plotted values are a factor of 10 smaller than the actual 
values. 
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Figure 9: Shor (dashed lines) and Semiclassical (full lines) Probabilities for 
q = 256, L = 16, and q = 256, L = 16, k = 7, respectively. For the Shor 
Probability the plotted values are a factor of 10 smaller than the actual 
values. 
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Figure 10: Shor (dashed lines) and Semiclassical (full lines) Probabilities 
for q = 512, L = 16, and q = 512, L = 16, k = 1, respectively. For the 
Shor Probability the plotted values are a factor of 10 smaller than the actual 
values. 



